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VERIFYING A NODE ON A NETWORK 

This invention relates to the field of communications security, and in particular, to a 
system and method that verifies the proximity of a node on a network. 

Network security can often be enhanced by distinguishing between local' nodes and 
'remote' nodes on the network. Local nodes, for example, are typically located within a 
particular physical environment, and it can be assumed that users within this physical 
enviromnent are autliorized to access the network. Remote nodes, on the other hand, are 
susceptible to unauthorized physical access. Additionally, unauthorized intruders on a 
network typicaUy access the network remotely, via telephone or other communication 
channels. Because of the susceptibility of the network to unauthorized access via remote 
nodes, network security can be enhanced by imposing stringent security measures, or 
access restrictions, on remote nodes, while not encumbering local nodes with this same 
restrictions. 

It is an object of this invention to provide a system and method that facilitates a 
determination of whether a node on a network is local or remote. It is a further object of 
this invention to provide a system and method that facilitates a secure determination of 
whether a node on a network is local or remote. It is a further object of this invention to 
integrate this determination with a system or method that verifies the authenticity of the 
node on the network. 

These objects and others are achieved by a system and method tiiat includes timing 
parameters within a node-verification protocol, such as the Open Copy Protection System 
(OCPS), to facilitate a determination of the proximity of a target node to a source node. 
The node-verification protocol includes a query-response sequence, wherein the source 
node communicates a query to the target node, and the target node communicates a 
corresponding response to the source node. The source node establishes a lower bound on 
the distance between the source node and the target node, based on a measure of the tune 
required to effect this query-response sequence. The time required to ejBFect this sequence 
includes the time required to communicate the query and response, as well as the time 
required to process the query and generate the response. The target node includes a 
measure of the time required to process the query and generate the response to the source 
node. The source node subtracts this time fi-om the total query-response time to determine 
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the tiine consumed for the comnumication. This communication time is compared to a 
threshold value to determine whether the target node is local or remote relative to the 
source node. 

FIG. 1 illustrates an example block diagram of a netwoik of nodes. 

FIG. 2 illustrates an example block diagram of a source and target node that effect a query- 
response protocol in accordance with this invention. 

Throughout the drawings, the same refermce numeral refers to the same element, or an 
element that performs substantially the same function. 

FIG. 1 illustrates an example block diagram of a networic 150 of nodes 1 10. One of 
the nodes, NodeD 110, is illustrated as being distant froin the other nodes 1 10. In 
accordance with this invention, each of the nodes 1 10 is configured to be able to determine 
the proximity of each other node 110. In a typical embodiment of this invention, the 
proximity determination is limited to a determination of whether the other node is "local" 
or "remote", although a more detailed determination of distances can be effected using the 
techniques disclosed herein. 

FIG. 2 illustrates an example block diagram of a source node 1 ICS and target node 
HOT that effect a query-response protocol to determine the proximity of the target node 
HOT to the source node 1 1 OS in accordance with this invention. The source node 1 lOS 
includes a processor 210 that initiates a query, and a communications device 220 that 
transmits the query to the target node HOT, The target node HOT receives the query and 
returns a corresponding response, via its communications device 230. To assure that the 
response corresponds to the communicated query, the protocol calls for the target node 
1 lOT to process at least a portion of the query and to include a result of this processing in 
the response, via a processor 240. 

The source node 11 OS is configured to measure the time consumed by tiie query- 
response process, illustrated in FIG. 2 as Tquoy-response 280. This query-response time 280 
includes the time to communicate the query and response, Tcommunicate 260, as well as the 
time to process the query and generate the response at the target node HOT, Tprocess 270. In 
accordance with this invention, the target node 11 OT is configured to include a measure of 
this processing time 270 within the response provided to the source node 1 lOS. The source 
node 1 lOS subtracts the processing time 270 fi-om the query-response time 280 to 
determine the communication time 260. Using known techniques, the distance between the 
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source 1 lOS and target 1 lOT can be calculated using this determined communication time 
260. As noted above, in a typical embodiment, the communication time 260 is used to 
detemiine whether the target 1 lOT is local or remote from the source 1 1 OS. This 
deteraiination is made in a preferred embodiment of this invention by comparing the 
5 conmiunication time 260 to a nominal threshold value, typically not more than a few 
milliseconds. If the communication time 260 is below the threshold, the target 1 lOT is 
detemiined to be local; otherwise, it is determined to be remote. 

In a typical embodiment, the source 1 lOS uses the remote/local proximity 
determination to control subsequent commxmications with the target HOT. For example, 

10 some files may be permitted to be transferred only to local nodes, all communications with 
a remote node may be required to be encrypted, and so oa Optionally, multiple threshold 
levels may be defined to distinguish different ranges of distances, such as whether a remote 
target node is located within the same country as the source node, and so on. 

Note that an unauthorized node can subvert the above process by providing a false 

1 5 processing time. In a preferred embodiment of this invention, the above query-response 
process is integrated within a node-authentication process, such as a key-exchange process, 
which typically includes one or more query-response sequences. By integrating the query- 
response process within the node-authentication process, the reported processing time is 
verified as bemg authentic. 

20 The OCPS protocol, for example, includes an authentication stage, a key exchange 

stage, a key generation phase, and subsequent data transmission phases. The key exchange 
phase is effected via a modified Needham-Schroeder key exchange protocol, as described 
in "Handbook of Applied Cryptography", Menezes et al. 

At the authentication stage, each of the source 1 1 OS and target HOT nodes 

25 authenticates a public key of each other. 

At the start of the key exchange phase, the source 1 lOS encrypts a random number 
and a random key, using the public key of the target 1 lOT, and transmits both encryptions 
to the target HOT. In accordance with this invention, the source node 1 lOS initiates a timer 
when these encryptions are transmitted to the target 1 lOT. 

30 The target 1 lOT decrypts the random nxmiber and random key, using the private 

key of the target. The target 1 lOT generates a new random number and a new random key, 
and encrypts the new random number, the new random key, and the decrypted random 
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number from the source 1 lOS, using the public key of the source 1 lOS, to form a response 
that is to be communicated to the source 1 lOS. The target HOT optionally signs the 
response, using the target's private key. In accordance with this invention, the target HOT 
also includes a measure of the time required to effect the decryption, encryption, and 

5 signing within the signed response. This processing time is optionally encrypted using the 
public key of the source. Because this decryption, encryption, and signing process 
generally consumes the same amount of time at a given target node, the target node is 
preferably configured to provide a predefined processing time as the measure of time to 
effect this processing. By signing the response, the target 1 lOT binds the reported 

10 processing time to the other parameters in the current response, thereby precluding an 

unauthorized replacement of the encrypted processing time with an alternative time that is 
encrypted using the public key of the source 1 lOS. 

When the source node 11 OS receives the response, it terminates the aforementioned 
timer. The source node 11 OS verifies the signed message, using the pubUc key of the target 

15 1 lOT, and decrypts the random numbers and random key from the response, using the 

private key of the soiorce 1 lOS. If the processing time within tlie response is encrypted, it is 
also decrypted at this time by the source 1 lOS, using the private key of the source 1 1 OS. In 
accordance with this invention, the source HQS subtracts the processing time from the time 
duration measured by the timer between the transmission of the encrypted query from the 

20 source 1 1 OS and the reception of the encrypted response from the target 1 lOT to determine 
the round-trip communication time between source 1 lOS and target HOT. 

To confirm the key exchange, the source 1 lOS transmits the decrypted new random 
niunber back to the target 1 lOT. Both the source 11 OS and target HOT control subsequent 
communications based upon receipt of the proper decrypted random numbers. In 

25 accordance with this invention, the source 1 lOS also controls subsequent communications 
based upon the determined communication time. 

If both nodes are verified, subsequent communications between the source 1 lOS 
and target HOT encrypt the conmiunications using a session key that is a combination of 
the random keys, the public keys, and a session index. 

30 The foregoing merely illustrates the principles of the invention. It will thus be 

appreciated that those skilled in the art will be able to devise various arrangements which, 
although not explicitly described or shown herein, embody the principles of the invention 
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and are thus within its spirit and scope. For example, in the above described OCPS 
protocol, the target node HOT may also be configured to determine the proximity of the 
source node 1 lOS, by timing the process between the transmission of the encrypted 
response and the receipt of the decrypted random number firom the source 1 1 OS. In this 

5 embodiment, the source 1 1 OS is configured to include a measure of the time required to 
process the encrypted response and transmit the decrypted random nxmaber in the last key 
exchange message that includes the decrypted random number, digitally signed by the 
source 1 lOS. The target HOT subtracts this processing time fi-om its measured time 
between transmission and receipt to determine the romid-trip target-somrce-target 

10 communication time, and thus the proximity of the source 1 1 OS to the target HOT. These 
and other system configuration and optimization features will be evident to one of ordinary 
skill in the art in view of this disclosure, and are included within the scope of the following 
claims. 
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CLAIMS: 

1. A method of detennining proximity of a target node to a source node, compiisiag: 

communicating a query from the source node to the target node, 
communicating a response from the target node to the source node, 

the response from the target node including a measure of processing time 
required to generate the response based on the query, 
receiving the response at the source node, 

determining a measure of query-response time between communicating the query 
and receiving the response, and 

determining the proximity of the target node based on a communication time that 
depends upon a difference between the measure of query-response time and the measure of 
processing time. 

2. The method of claim 1, wherein 

the query and response correspond to at least a portion of a cryptographic key- 
exchange protocol. 

3. The method of claim 2, wherein 

the key-exchange protocol corresponds to aNeedham-Schroeder key-exchange 
protocol. 

4. The method of claim 1, wherein 

the query and response correspond to at least a portion of an OCPS protocol. 

5. The method of claim 1, wherein 

the measure of processing time at the target node is predefined. 

6. The method of claim 1, wherein 

detennining the proximity includes comparing the communication time to a 
threshold value that distinguishes between local and remote nodes. 
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7. The method of claim 1, further including 

restricting communications with the target node based on the proximity. 

8. The method of claim 1, wherein 

the response is cryptographically signed by the target node. 

9. A node on a network including: 

a communication device that is configured to receive a query from a source node 
and to transmit a conresponding response to the source node, 

a processor that is configured to process the query and produce therefrom the 
response, 

wherein 

the response includes a measure of processing time required to process the query 
and produce the response. 

10. The node of claim 9, wherein 

the processor is configured to process tiie query and produce the response as part of 
a cryptographic key-exchange protocol 

11. The node of claim 10, wherein 

the key-exchange protocol corresponds to a Needham-Schroeder key-exchange 
protocol. 

12. The node of claim 9, wherein 

the query and response correspond to at least a portion of an OCPS protocol 
initiated by the source node. 

13. The node of claim 9, wherein 

the measure of processing time is predefined. 

14. The node of claim 9, wherein 

the processor is fiulher configured to cryptographically sign the response. 
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15. A node on a network including: 

a communication device that is configured to transmit a query to a target node and 
to receive a corresponding response fi-om the target node, 

the response fi:om the target node including a measure of processing time 
required to generate the response at the target node, and 
a processor that is configured to: 
generate the query, 
receive the response, 

measure a query-response time between generating the query and receiving 
the response, and 

determine a proximity of the target node relative to the node based on a 
communication time that is dependent upon a difference between the query-response time 
and the measure of processing time. 

16. The node of claim 15, wherein 

the processor is configured to generate the query akd receive the response- as part of 
a cryptographic key-exchange protocol. 

17. The node of claim 16, wherein 

the key-exchange protocol corresponds to a Needham-Schroeder key-exchange 
protocol. 

18. The node of claim 15, wherein 

the query and response correspond to at least a portion of an OCPS protocol 
initiated by the node. 

19. The node of claim 15, wherein 

the measure of processing time is predefined. 

20. The node of claim 15, wherein 

the processor is configured to determine the proximity based on a comparison of 
the communication tune to a threshold value that distinguishes between local and remote 
nodes. 
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21. The node of claim 15, wherein 

the processor is further configured to control subsequent communications with the 
target node based on the proximity. 
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